Gentoo Linux Security Advisory GLSA 200803-31 – Two vulnerabilities were found in the Kerberos 4 support in KDC: A global variable is not set for some incoming message types, leading to a NULL pointer dereference or a double free() and unused portions of a buffer are not properly cleared when generating an error message, which results in stack content being contained in a reply. Versions less than 1.6.3-r1 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/64848/glsa-200803-31.txt
Source: https://packetstormsecurity.com/files/64848/Gentoo-Linux-Security-Advisory-200803-31.html